$ rpki-client -vvvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: kX7Qn2/aGD/4/OwuOZxETqMeW5fwFwhed9GdHZUOXDA= Subject key identifier: AE:77:CA:DF:B3:D5:58:D5:E7:4D:D7:8F:00:D5:45:0F:F5:49:BC:C1 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 258B2C7324908EAFF79F7156285B34BB3733CB3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 22:46:03 +0000 Manifest this update: Wed 02 Sep 2026 22:41:03 +0000 Manifest next update: Fri 04 Sep 2026 02:01:03 +0000 Files and hashes: 1: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) 2: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: upUb+Dsn201NWr2lyDB7xiDnS/L7QdBjGEH/5tThEqc=) 3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8b:2c:73:24:90:8e:af:f7:9f:71:56:28:5b:34:bb:37:33:cb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Sep 2 22:41:03 2026 GMT Not After : Sep 4 02:01:03 2026 GMT Subject: CN=AE77CADFB3D558D5E74DD78F00D5450FF549BCC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f8:fe:10:c4:15:fa:45:7b:f3:d2:d3:c6:78: 73:56:5a:1c:fa:e6:86:88:fa:fc:92:6d:19:cd:ee: 9d:9a:92:e7:5f:86:d3:2a:98:2a:f1:16:89:24:5d: 8e:2d:40:81:c9:81:47:0f:a2:76:ba:9c:0c:2f:80: 7d:03:ed:c8:80:9e:db:80:2d:17:10:c6:21:97:cb: b3:02:7a:c4:fd:f2:bd:4a:75:5d:f2:b9:61:cb:df: 70:95:de:1d:db:18:2f:8a:08:e8:b8:d7:f5:67:7e: 91:3b:38:67:2c:9f:07:de:46:64:aa:d2:e3:bd:0c: 80:9d:4a:e4:9b:a5:1e:b9:47:85:64:cc:e2:69:e7: 8d:86:e2:7a:ce:31:8f:ec:af:c1:6f:9c:0b:8b:b7: 8b:14:95:d7:ce:de:69:60:bf:fd:b2:24:07:3f:a8: fd:ad:c7:c9:34:04:af:ea:c7:41:67:77:40:b1:87: e9:8a:1c:99:aa:bf:be:1e:6b:2a:ef:e8:9f:74:f4: 13:14:ed:47:38:b2:b2:bd:52:5c:e6:31:8a:cc:90: d4:16:e7:10:67:99:00:35:43:1d:93:09:f4:be:b4: 40:cf:30:70:62:9c:23:15:63:5b:56:ba:93:4f:c2: 5b:f2:ba:63:ae:b8:e1:3a:0b:1b:35:be:0f:74:ed: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:77:CA:DF:B3:D5:58:D5:E7:4D:D7:8F:00:D5:45:0F:F5:49:BC:C1 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:60:e1:52:e1:a6:13:31:19:90:45:9c:41:05:35:ed:ba:78: 68:a9:9b:3c:ba:1a:7c:ea:69:e3:fd:ba:1e:a4:60:87:9a:af: 78:05:fb:9f:34:a7:60:93:ed:37:50:26:05:e0:f2:2d:cb:a4: ef:f7:73:52:ab:7b:f5:5e:4f:44:29:95:e0:65:d5:ee:2c:a9: 7a:d6:d0:c2:78:3d:b5:77:47:16:8f:45:22:0a:89:97:d3:0d: 03:04:5e:32:20:0e:fd:1e:9d:e3:97:92:db:20:a6:34:39:8c: 84:b8:3f:e2:e0:0d:01:93:84:b1:0a:78:8d:0f:27:6f:53:45: a8:0c:c3:24:46:8e:f8:54:c7:1a:24:02:86:c8:27:3d:50:dc: 10:27:31:6d:6b:1d:95:d1:6a:5b:0a:8f:75:fa:b4:95:d6:81: fd:fb:60:e1:9b:c5:1f:ae:0d:f5:b9:16:2f:c2:33:08:32:1b: 2c:ae:0a:62:fa:2f:bf:53:30:02:f4:86:04:de:20:24:8a:be: de:5e:7d:e4:e4:3a:66:4c:19:00:84:42:5e:95:ec:84:f5:a6: 7e:83:e7:0c:52:89:75:b2:5d:6e:0e:b1:ab:9e:a8:9b:8f:84: 68:36:6e:3b:6f:e9:7b:7d:e3:23:eb:bd:cc:fc:f8:49:fb:43: 8e:05:56:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYsscySQjq/3n3FWKFs0uzczyzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjA5MDIyMjQxMDNaFw0yNjA5MDQwMjAxMDNaMDMxMTAvBgNV BAMTKEFFNzdDQURGQjNENTU4RDVFNzRERDc4RjAwRDU0NTBGRjU0OUJDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+P4QxBX6RXvz0tPGeHNWWhz6 5oaI+vySbRnN7p2akudfhtMqmCrxFokkXY4tQIHJgUcPona6nAwvgH0D7ciAntuA LRcQxiGXy7MCesT98r1KdV3yuWHL33CV3h3bGC+KCOi41/VnfpE7OGcsnwfeRmSq 0uO9DICdSuSbpR65R4VkzOJp542G4nrOMY/sr8FvnAuLt4sUldfO3mlgv/2yJAc/ qP2tx8k0BK/qx0Fnd0Cxh+mKHJmqv74eayrv6J909BMU7Uc4srK9UlzmMYrMkNQW 5xBnmQA1Qx2TCfS+tEDPMHBinCMVY1tWupNPwlvyumOuuOE6Cxs1vg907XWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrnfK37PVWNXnTdePANVFD/VJvMEwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVg4VLhphMxGZBFnEEFNe26eGipmzy6Gnzq aeP9uh6kYIear3gF+580p2CT7TdQJgXg8i3LpO/3c1Kre/VeT0QpleBl1e4sqXrW 0MJ4PbV3RxaPRSIKiZfTDQMEXjIgDv0eneOXktsgpjQ5jIS4P+LgDQGThLEKeI0P J29TRagMwyRGjvhUxxokAobIJz1Q3BAnMW1rHZXRalsKj3X6tJXWgf37YOGbxR+u DfW5Fi/CMwgyGyyuCmL6L79TMAL0hgTeICSKvt5efeTkOmZMGQCEQl6V7IT1pn6D 5wxSiXWyXW4OsaueqJuPhGg2bjtv6Xt94yPrvcz8+En7Q44FVlA= -----END CERTIFICATE-----Generated at Thu Sep 3 12:36:48 2026 by rpki-client